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4. (Amended) The method of claim 2 in which the bastion object performs type 
checking on all method calls made by a mobile program to a service facility. 

5. (Amended) A method for use in a distributed system for processing a mobile program 
that executes in one node of the distributed system, may be interrupted at almost any point in its 
execution, and may be moved to another node of the distributed system for further execution, 
comprising 

in the one node, capturing a current state of the mobile program execution, 

delivering the captured state and program code of the mobile program to the other node, 

and 

continuing execution at the other node from the point of interruption based on the 
captured state and the program code. 

6. (Amended) The method of claim 5 further comprising 

also delivering with the captured state and the program code information in a transported 
file system or other information useful for continued execution of the mobile program. 

7. (Amended) The method of claim 6 in which the information in the transported file 
system or other information is accessible without executing the mobile program. 

8. (Unchanged) The method of claim 5 in which the step of capturing comprises using 
an encoding scheme of a language interpreter. 

9. (Amended) A method for enabling communication with a mobile program running in 
a distributed system, a mobile program service station, an extension, or another application, 
comprising 

providing a connector mechanism which permits each of mobile program, the mobile 
program service station, the extension, and the other application to identify services that it 
provides, and permits each of them to find services that it needs, and 
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enabling the mobile program to communicate with mobile program service stations via 
connector objects associated with the connector mechanism. 

10. (Amended) The method of claim 9 in which each of the connector objects is 
provided by a supervisor process running in the distributed system and prevents uncontrolled 
access to a needed service. 

1 1 . (Unchanged) The method of claim 9 in which the connector mechanism includes a 
connector broker and connector manager. 

12. (Unchanged) The method of claim 9 in which the connector objects are data typed. 

13. (Amended) A method for enabling negotiation between two unrelated mobile 
programs, mobile service stations, extensions, or other applications, in a distributed system, 
comprising 

in an operating environment in a node of the distributed system, receiving information 
from one of the two mobile programs, mobile program service stations, extensions, or other 
applications, concerning a transaction offered to other mobile programs, mobile program service 
stations, extensions, or other applications, 

in the operating environment in the node, receiving information from the second of the 
two mobile programs, mobile programs service stations, extensions, or other applications 
concerning a transaction in which the second of the mobile programs, mobile program service 
stations, extensions, and other applications wishes to engage, 

notifying the second mobile program, mobile program service station, extension, or other 
application of the one mobile program, mobile program service station, extension, or other 
application, and 

enabling the two mobile programs, mobile program service stations, extensions, or other 
applications to communicate concerning the transaction. 
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14. (Amended) The method of claim 13 in which the information is received from two 
mobile programs by a third mobile program. 

15. (Amended) A method for enabling action by an operating environment in a 
distributed system with respect to a mobile program which is programmed in a language that is 
not fully supported by the operating environment, comprising 

labeling a mobile program to identify operating environment features required for full 
support of the mobile program, 

in an operating environment, examining the labeling of the mobile program to determine 
whether the operating environment supports all of the identified features, and 

taking an action based on whether all the identified features are supported. 

16. (Amended) The method of claim 15 wherein the action comprises sending the 
mobile program to another operating environment for processing. 

17. (Amended) The method of claim 15 in which the action comprises retrieving non- 
program specific data from the mobile program. 

18. (Unchanged) A method for aiding communication with a mobile program executing 
in operating environments provided at nodes of a distributed system, comprising 

maintaining a name space that uniquely identifies types of information to be interchanged 
as part of the communication, and 

using a name within the name space to identify a type of information to be interchanged. 

19. (Unchanged) The method of claim 18 in which the mobile program registers an 
interface which includes the name of a type of information that is to be interchanged. 

Cancel claims 20 through 23 without prejudice. 

20. (Cancelled) A method for controlling the timing of execution of an action associated 
with a mobile program running in an operating environment provided at a node of a distributed 
system, comprising 
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providing a trigger protocol in the operating environment, 

enabling the mobile program to register a condition with the operating environment, 
causing the operating environment to trigger the execution of the action upon the 
occurrence of the condition. 

21. (Cancelled) The method of claim 20 in which the trigger protocol defines trigger 
statements each of which identifies at least the condition and the action. 

22. (Cancelled) The method of claim 20 in which the operating environment maintains a 
table of registered trigger expressions for all mobile programs that have registered conditions. 

23. (Cancelled) The method of claim 20 in which the execution is triggered by a 
program contained in the mobile program. 

24. (Amended) A method for controlling interaction between a mobile program and an 
application running in an operating environment provided at a node of a distributed system, 
comprising 

defining a trusted portion of the operating environment which provides trusted services to 
the mobile program, 

requiring portions of the application running in the operating environment to be 
registered as trusted, and 

permitting indirect interaction via the operating environment between the mobile program 
and the application running in the operating environment only if the portions of the application 
required to be registered have been registered. 
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25. (Amended) A method for enabling a mobile program to carry out defined functions 
including otherwise unsafe functions, through the use of extensions comprising 

coding safe extensions to an operating environment and to [the] an interpretive language 
under which the mobile program runs, and 

permitting the mobile program to carry out the defined functions by making use of the 
extensions. 



